The Daily Beast reports that U.S. investigators identified the hacker as a Moscow-based Russian intelligence operative after the hacker failed to activate a virtual private networking (VPN) service meant to obscure the operative’s location before logging on.

The result was the operative’s Moscow IP address being caught in the logs of a U.S. social media company, allowing U.S. investigators to track the individual.

Guccifer 2.0 also screwed up when they discovered his password was “Password1234.”